JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.159.43.117

98.159.43.117 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 45%: ?

45%

ISP	F.N.S. HOLDINGS LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	fns-holdings.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.159.43.117

Whois 98.159.43.117

IP Abuse Reports for 98.159.43.117:

This IP address has been reported a total of 128 times from 58 distinct sources. 98.159.43.117 was first reported on March 3rd 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-11 06:04:11 (8 hours ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.117 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 02:04:06.497114 2026] [security2:error] [pid 7316:tid 7316] [client 98.159.43.117:29125] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|insua.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "insua.com"] [uri "/images/stories/themes.php"] [unique_id "alHc1tDFCx_tdeQ0d-uFCgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-10 09:14:17 (1 day ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-07-09 14:55:58 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-09 07:27:26 (2 days ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.117 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 03:27:19.720326 2026] [security2:error] [pid 13490:tid 13490] [client 98.159.43.117:30685] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|wedemandavote.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "wedemandavote.com"] [uri "/images/stories/themes.php"] [unique_id "ak9NVwyEy4B778YnRaLw6QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-09 00:57:00 (2 days ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-08 22:45:49 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-08 00:03:23 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 23:59:58 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.117 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 19:59:51.586122 2026] [security2:error] [pid 13704:tid 13704] [client 98.159.43.117:50695] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|blockadegc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "blockadegc.com"] [uri "/images/stories/themes.php"] [unique_id "ak2S922aQLGJDto-O_SAdAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-06-27 11:18:00 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 ghostwarriors	2026-06-27 07:50:41 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 AGEPCom	2026-05-13 11:26:36 (1 month ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-13 11:13:16 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-201) show less	Bad Web Bot
🇪🇸 masterguru	2026-05-13 04:32:18 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇧🇾 lns.bz	2026-05-13 02:47:54 (1 month ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 nyt	2026-05-13 00:05:29 (1 month ago)	CGI Probe, 404 on login.php indicates potential scanning, Attempt to access non-existent sc_1.php fi ... show more CGI Probe, 404 on login.php indicates potential scanning, Attempt to access non-existent sc_1.php file show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.225

🇺🇸 162.217.100.201

🇫🇷 85.217.140.45

🇳🇱 91.92.40.7

🇳🇱 45.148.10.147

🇺🇸 216.173.76.93

🇹🇭 171.100.67.250

🇧🇷 152.237.190.127

🇨🇳 120.193.9.169

🇵🇰 111.92.157.88

🇳🇱 45.148.10.152

🇬🇧 35.203.211.19

🇳🇱 31.76.9.4

🇬🇧 2.57.17.159

🇨🇱 200.54.85.68

🇰🇷 175.45.204.121

🇫🇮 95.217.114.159

🇳🇱 91.92.40.24

🇺🇸 54.88.29.90

🇳🇱 45.148.10.141